CN101707695B - Method and device for controlling access authority in Internet protocol television service - Google Patents

Method and device for controlling access authority in Internet protocol television service Download PDF

Info

Publication number
CN101707695B
CN101707695B CN2009102375006A CN200910237500A CN101707695B CN 101707695 B CN101707695 B CN 101707695B CN 2009102375006 A CN2009102375006 A CN 2009102375006A CN 200910237500 A CN200910237500 A CN 200910237500A CN 101707695 B CN101707695 B CN 101707695B
Authority
CN
China
Prior art keywords
access control
user
control rule
access
user characteristics
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
CN2009102375006A
Other languages
Chinese (zh)
Other versions
CN101707695A (en
Inventor
刘建峰
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
ZTE Corp
Original Assignee
ZTE Corp
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by ZTE Corp filed Critical ZTE Corp
Priority to CN2009102375006A priority Critical patent/CN101707695B/en
Publication of CN101707695A publication Critical patent/CN101707695A/en
Application granted granted Critical
Publication of CN101707695B publication Critical patent/CN101707695B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Landscapes

  • Storage Device Security (AREA)

Abstract

The invention provides a method and a device for controlling access authority in Internet protocol television service. The method comprises that: step A, access equipment extracts user characteristic information of a user terminal from a service data request message sent by the user terminal; step B, the access equipment traverses and searches access control rules in an access authority control table, determines the access control rule matched with the user terminal according to the user characteristic information, and adds the matched access control rule and the value corresponding to a user characteristic item matched with the user characteristic information to acquire the match score of the matched access control rule; and step C, the access equipment controls the access authority of the user terminal according to the access control rule of which score reaches a predetermined threshold value in the matched access control rules. The method and the device can implement quick match for the user access authority, and are favorable for expanding and/or modifying the access control rules according to a variety of user characteristic information.

Description

The method and apparatus of control access rights in a kind of internet protocol television service
Technical field
The present invention relates to the data communication technology field, particularly relate to the method and apparatus of control access rights in a kind of internet protocol television service.
Background technology
Internet protocol TV IPTV, claim IPTV again, release based on the basis, broadband by operator, utilize the IP broadband network, integrate multiple technologies such as the Internet, multimedia, communication, to the user live telecast, video request program are provided, the business of multiple interactive services such as surf the web, the business that the user can use by the mode of PC or " IP set-top box+TV ".
In the realization of IPTV business, after user terminal sends the message of requested service data such as group broadcasting program to access device, access device carries out access authentication to the user, after the user passes through access authentication, the control table of access device access rights, from the authority control table, find out the access control rule of mating, and for this user access control right is set according to the access control rule of determining with the user.For example, above-mentioned access control right comprises in the following control of authority one or multinomial:
1) control of authority of the multicast group that the user is added comprises preview, browses, inquires about, refuses authority;
2) restriction of the multicast group number that can add the active user;
3) restriction of the bandwidth that can take the active user;
4), also comprise restriction to preview interval and preview number of times for the preview user.
In the implementation method of the IPTV business of prior art, the access control rule of searching user coupling is confined to the medium access control (MAC that comprises in port (port) that the user sends request message and the user's request message, Media Access Control) address, and after determining the rule of coupling, from the rule of coupling, determine the optimum Match access control rule that port and MAC Address are all mated.The above-mentioned IP TV service implementation method of prior art, the user characteristics of using when searching the access control rule of coupling is confined to port and MAC Address, and is more single; And the method inefficiency of searching the optimum Match access control rule of prior art is unfavorable for access control rule is expanded and/or revising according to other user's characteristic information except that port, MAC Address.
Summary of the invention
The method and apparatus that the purpose of this invention is to provide in a kind of internet protocol television service the control access rights is difficult for the technical problem that access control rule is expanded according to user's characteristic information with the method for the control access rights that solve prior art.
To achieve these goals, the invention provides the method for control access rights in a kind of internet protocol television service, wherein, comprise the steps:
Steps A, access device are extracted the user's characteristic information of described user terminal from the service data request message that user terminal sends;
Step B, access control rule in the control table of described access device traversal queries access rights, according to the access control rule that described user's characteristic information is determined and described user terminal is complementary, with the access control rule and the corresponding score value addition of user characteristics item that described user's characteristic information is complementary of described coupling, obtain the matching score of the access control rule of described coupling;
Step C is in the access control rule of described access device according to described coupling, the score access control rule that reaches predetermined threshold controls the access rights of described user terminal.
Preferably, described method, wherein, described step C comprises:
Described access device is defined as described user terminal optimum Match rule with the highest access control rule of score in the access control rule of described coupling, and according to described optimum Match rule the access rights of described user terminal is controlled.
Preferably, described method, wherein, among the described step B, described step definite according to described user's characteristic information and the access control rule that described user terminal is complementary comprises:
Step B1 determines the user characteristics item that need inquire about;
Step B2, whether the described content of the user characteristics item of inquiry that needs that comprises in the content of the described user characteristics item that need inquire about that comprises in the access control rule of more described current inquiry and the user's characteristic information of described extraction mates.
Preferably, described method, wherein, described step B1 comprises:
Judge whether inquiry unlatching attribute default, described user characteristics item is opening; In this way, then determine the user characteristics item of described user characteristics Xiang Weixu inquiry; Otherwise, do not need described user characteristics item is inquired about.
Preferably, described method wherein, among the described step B1, when attribute is opened in the inquiry of judging described user characteristics item not for opening, also comprises:
Step B 11, judge that whether described user characteristics item is last the user characteristics item in the access control rule of current inquiry; In this way, execution in step B12 then; Otherwise, continue to judge whether the unlatching attribute of the next user characteristics item in the access control rule of described current inquiry is opening, all the user characteristics items in the access control rule of having judged described current inquiry;
Step B12, whether the access control rule of judging described current inquiry is the last item access control rule in the described access control rule table, in this way, execution in step C then; Otherwise, continue next bar access control rule of visit.
Preferably, described method, wherein:
Described user characteristics item comprises at least one in the following characteristic item:
The request message input port;
The Media Access Control address of user terminal;
VLAN under the user terminal;
The IP address of user terminal;
The IPV4 address of user terminal;
The IPV6 address of user terminal;
The identity information of user terminal.
Preferably, described method, wherein, the score value of described user characteristics item is corresponding with the priority of described user characteristics item, and the user characteristics item score value that priority is high more is big more.
On the other hand, provide the device of control access rights in a kind of internet protocol television service, wherein, comprising:
The user characteristics extraction module is used for extracting the user's characteristic information of described user terminal from the service data request message of user terminal transmission;
Matching module, the access control rule that is used for the control table of traversal queries access rights, according to the access control rule that described user's characteristic information is determined and described user terminal is complementary, with the access control rule and the corresponding score value addition of user characteristics item that described user's characteristic information is complementary of described coupling, obtain the matching score of the access control rule of described coupling;
Determination module is used for described access device and according to the access control rule of described coupling, the access control rule that score reaches predetermined threshold the access rights of described user terminal is controlled.
Preferably, described device, wherein, described determination module, be further used for the highest access control rule of score in the access rule of described coupling is defined as described user terminal optimum Match rule, and the access rights of described user terminal controlled according to described optimum Match rule.
Preferably, described device, wherein, described matching module comprises:
User characteristics item determination module is used for need determining the user characteristics item of inquiry when determining the access control rule that is complementary with described user terminal;
Whether the described content of the user characteristics item of inquiry that needs that comprises in the comparison module, the content of the described user characteristics item that needs inquiry that is used for that the access control rule of more described current inquiry comprises and the user's characteristic information of described extraction mates.
Preferably, described device, wherein, described user characteristics item determination module comprises:
The determined property module is opened in inquiry, is used to judge whether inquiry unlatching attribute default, described user characteristics item is opening, and the user characteristics item that attribute is the user characteristics Xiang Weixu inquiry of opening is opened in inquiry.
Technique effect of the present invention is:
The present invention is by when inquiring the access control rule of coupling, the corresponding score value addition of user characteristics item that access control rule and the user's characteristic information of coupling is complementary, obtain the matching score of the access control rule of coupling, and come the access rights of this user terminal are controlled according to the access control rule that score in the access control rule of coupling reaches predetermined threshold, can find the accurately matched rule of the user's characteristic information of match user terminal fast, realization is accurately mated fast to access privilege, help access control rule is expanded and/or revising according to multiple user's characteristic information, can satisfy access control demand more flexibly, and realize simple.
Description of drawings
Fig. 1 is the schematic flow sheet of the method for control access rights in the internet protocol television service of the embodiment of the invention;
Fig. 2 is the schematic flow sheet of method of the control access rights of another embodiment of the present invention;
Fig. 3 is the structural representation of the device of control access rights in the internet protocol television service of the embodiment of the invention.
Embodiment
For making the purpose, technical solutions and advantages of the present invention clearer, describe the present invention below in conjunction with the accompanying drawings and the specific embodiments.
Fig. 1 is the schematic flow sheet of the method for control access rights in the internet protocol television service of the embodiment of the invention.As Fig. 1, the method for this embodiment comprises:
Step 101, access device are extracted the user's characteristic information of described user terminal from the service data request message that user terminal sends; Exemplarily, above-mentioned service data request message is the group broadcasting program request message.
Exemplarily, above-mentioned user's characteristic information comprises in following one or multinomial: access device receives the IPV6 address, subscriber identity information of IPV4 address, the user terminal of virtual LAN VLAN information under the port information, user terminal of above-mentioned request message, user MAC and user terminal IP address, user terminal etc.
Step 102, access control rule in the control table of access device traversal queries access rights, according to the access control rule that described user's characteristic information is determined and described user terminal is complementary, with the access control rule and the corresponding score value addition of user characteristics item that described user's characteristic information is complementary of described coupling, obtain the matching score of the access control rule of described coupling.
Exemplarily, above-mentioned access rights control table sets in advance in access device.
Exemplarily, the score value of above-mentioned user characteristics item correspondence is pre-set, and is arranged in the access device.
Preferably, in the above-mentioned steps 102, described step definite according to described user's characteristic information and the access control rule that described user terminal is complementary comprises: step 1021, determine the user characteristics item that need inquire about; Step 1022, whether the described content of the user characteristics item of inquiry that needs that comprises in the content of the described user characteristics item that need inquire about that comprises in the access control rule of more described current inquiry and the user's characteristic information of described extraction mates.
Preferably, above-mentioned steps 1021 comprises: judge whether inquiry unlatching attribute default, described user characteristics item is opening; In this way, then determine the user characteristics item of described user characteristics Xiang Weixu inquiry; Otherwise, do not need described user characteristics item is inquired about.
Step 103 is in the access control rule of described access device according to described coupling, the score access control rule that reaches predetermined threshold controls the access rights of described user terminal.
Utilize the method for the embodiment of the invention, come the access rights of this user terminal are controlled by the access control rule that reaches predetermined threshold according to score, can find the accurately matched rule of the user's characteristic information of match user terminal fast, realize accurate fast coupling access privilege.
Preferably, above-mentioned steps 103 comprises:
Described access device is defined as described user terminal optimum Match rule with the highest access control rule of score in the access control rule of described coupling, and according to described optimum Match rule the access rights of described user terminal is controlled.
Exemplarily, above-mentioned access rights to the user are controlled and comprised: the control of authority of the multicast group that the user is added comprises preview, browses, inquires about, refuses authority; The restriction of the multicast group number that can add the active user; The restriction of the bandwidth that can take the active user; For the preview user, also comprise at interval and the restriction of preview number of times etc. preview.
Exemplarily, in the above-mentioned described step 102, described step definite according to described user's characteristic information and the access control rule that described user terminal is complementary comprises: user characteristics item that need to determine inquiry; With, whether the described content of the user characteristics item of inquiry that needs that comprises in the content of the described user characteristics item that need inquire about that comprises in the access control rule of more described current inquiry and the user's characteristic information of described extraction mates.
In the embodiments of the invention, can set the user characteristics item that needs inquiry in the overall situation in advance, promptly pre-set the user characteristics item that need carry out matching judgment; Exemplarily, can open attribute by the inquiry of user characteristics item correspondence is set to open or close to be provided with need coupling or need not mate this user characteristics item.
Exemplarily, among this embodiment, user terminal sends the IGMP message to office's method, apparatus such as digital subscriber line access multiplex (DSLAM, Digital Subscriber Line Access Multiplexer), program request specific multicast channel, comprise browse, function such as preview; DSLAM comes the user is carried out the IPTV authentication by access switch in device such as high-end switch after receiving user's message, checks whether the user has this operating right.After determining the optimum Match rule, according to the access rights of optimum Match rule, authenticating result is returned to DSLAM equipment to this multicast channel, this authenticating result is for allowing visit or denied access, and the relevant information of noting authentication is done daily record and checked usefulness.
Fig. 2 is the schematic flow sheet of method of the control access rights of another embodiment of the present invention.As Fig. 2, the method for this embodiment comprises the steps:
Step 201, access device extracts and preserves user's characteristic information, this user's characteristic information comprises the information of following user characteristics item: the user's message input port, VLAN under the user terminal, the MAC of user terminal, other information follow-uply can also be expanded flexibly in the IP addresses of user terminal etc., as at IPV6 user's IPV6 address etc.;
Step 202 is according to the user's characteristic information of extracting, the access rights control table in the traversal queries access device IPTV system;
Wherein, step 203 to step 206 is inquiry concrete matching processs to wall scroll access control rule during every access rule;
Step 203 is opened property value according to the inquiry of preset user characteristic item, judges item by item whether the inquiry unlatching attribute of each user characteristics item is in opening; In this way, execution in step 204 then; Otherwise, execution in step 205;
Step 204, by judging relatively for this user characteristics item, whether the content of this characteristic item of setting in the content of this characteristic item in the user's characteristic information of extraction and the access control rule of current inquiry is complementary, exemplarily, this coupling is identical for content; In this way, execution in step 206 then; Otherwise, determine that this rule and this user terminal do not match, and change execution in step 209 over to;
Whether step 205, the user characteristics item of judging current comparison are last user characteristics items in this access control rule; In this way, execution in step 207 then; Otherwise, change step 203 over to, continue to judge whether the next item down user characteristics item mates;
Step 206 joins the score value of the user characteristics item correspondence of this coupling in the matching score of current rule, changes execution in step 205 over to; The matching score of current rule equal these all couplings of rule user characteristics item correspondence score value and; Exemplarily, the score value of this user characteristics item correspondence is predefined;
Step 207 judges that current regular score is whether greater than the matching score of historical optimum Match rule; In this way, execution in step 208 then; Otherwise, execution in step 209;
Step 208, the optimum Match rule is set to current rule;
Step 209; Whether the access control rule of judging current inquiry is the last item access control rule; In this way, execution in step 210; Otherwise, changing execution in step 202 over to, visit is next the bar access control rule in the queried access control rule tables;
Step 210 is returned the corresponding rule of optimum Match rule number, according to the corresponding access control right of this optimum Match rule, returns authenticating result; Permission or refusing user's are to the program request of group broadcasting program.
In this example, must being divided into of the access control rule of coupling: the score value of all user characteristics item correspondences of coupling and.
The method of computation rule score and definite optimum Match rule is exemplarily in the foregoing description, and is not used in as restriction.Exemplarily, when determining the matching score of every rule, can determine the user characteristics item of all couplings earlier, and then, obtain this regular matching score the score value addition of the user characteristics item correspondence of all couplings.Exemplarily, also can be after the matching score that obtains the all-access control law, the rule that score is the highest is defined as the optimum Match rule.
In this embodiment, each user characteristics Xiang Yuyi user characteristics territory is corresponding; Be each predetermined user characteristics item such as PORT, VLAN etc. provide two extra territories, first is the i.e. score value of this user characteristics item of score value in this user characteristics territory, and this score value is corresponding with the priority of this user characteristics item, and the user characteristics item that priority is high more has high more score value; Second is that this user characteristics territory is that inquiry is opened, be used to be identified at when carrying out rule match, whether need inquire about the content whether this user characteristics item promptly need compare the content of this user characteristics item in the user's characteristic information and this user characteristics item in the access control rule and whether be complementary; If opening attribute, this inquiry is in opening, then when whether judgment rule mates, take the content of this user characteristics item of setting in the content of this user characteristics item in the user's characteristic information and the rule to go comparison, content as this user characteristics item among both is complementary, then determine the user characteristics item of this user characteristics item for coupling, then add the score value of this feature correspondence for this rule, the initial value of the score of this rule can be set to 0.Do not match and then go to inquire about next bar rule.Open inspection and then remove to inquire about next user characteristics.Among this embodiment, the rule that matching score is the highest during record traversal access control rule number, should rule as the optimum Match rule, and the rule ID that the rule of returning this rule after the rule traversal finishes number promptly should rule.Exemplarily, the setting of inquiry unlatching attribute can realize by the value that the inquiry open position is set.
Exemplarily, in the embodiments of the invention, access device can reach the score value of user characteristics item correspondence when the user characteristics item coupling of need inquiry according to determining as following table 1 whether the user characteristics item need be inquired about.In this table, when user characteristics item characteristic of correspondence inquiry open position is that T is characteristic query that true time identifies this user characteristics item and opens attribute and be in opening, needs whether the content of the content of this user characteristics item in the user's characteristic information of extracting and this user characteristics item in the access control rule mated and inquire about; When user characteristics item characteristic of correspondence inquiry open position is that F is fictitious time and need not to inquire about this user characteristics item.
The characteristic item score value ?1 2 4 16
The user characteristics item PORT VLAN MAC IP
The inquiry open position T T F T
Table 1
Exemplarily, last table 1 sets in advance in access device.
In this example, as above table 1 is set the information that comprises following user characteristics item in the user's characteristic information that the user extracts: virtual net VLAN under the input port PORT of user's request message, user terminal, user terminal MAC, user terminal IP address information; Wherein, PORT, VLAN, the IP address information is the user characteristics item that need compare when inquiry optimum Match rule, and need not to judge whether MAC mates; And the score value of PORT characteristic item correspondence is 1, and the score value of VLAN characteristic item correspondence is 2, and the score value of MAC characteristic item correspondence is 4, and the score value of IP characteristic item correspondence is 16.
Suppose the PORT item of regular a and user's characteristic information and VLAN item coupling, matching score that then should rule a is: 1+2=3; Suppose the IP address entry coupling of regular b and user's characteristic information, matching score that then should rule b is 4; Therefore, in this embodiment, as only regular a and b in the access control right table, then regular b is the optimum Match rule.
Except that above-mentioned characteristic item, according to demand, the user characteristics item of other energy representative of consumer attribute can be set; Exemplarily, VIP identity information that can the user is set to the user characteristics item, and establishes the score value of this user characteristics item enough big, like this, the rule of this characteristic item coupling promptly can be used as the optimum Match rule, thereby, can realize mating fast VIP user's access control right.
In the embodiments of the invention, can be that each user characteristics item is set score value under global schema.And user characteristics can accurately represent its corresponding score value of specific user can be big more more during design, more can accurately represent a user such as MAC than PORT, and score value that can MAC is set to can be greater than the score value of PORT.
In the embodiments of the invention, in the overall situation attribute is opened in the inquiry of user characteristics item in advance and be provided with.When every access control rule of inquiry, when the inquiry open position of judging user characteristics item correspondence is in opening, just go to mate this characteristic item territory.
Technical scheme of the present invention, match user feature neatly, and after expanding according to user characteristics and/or revising access control rule, still can determine the optimum Match rule apace, so the extendibility of the access control rule according to user characteristics of the present invention is good, and can adjust the inquiry open position and the score value of user characteristics item flexibly according to actual conditions.
Fig. 3 is the structural representation of the device of control access rights in the internet protocol television service of the embodiment of the invention.As Fig. 3, this device comprises: user characteristics extraction module 301 is used for extracting the user's characteristic information of described user terminal from the service data request message of user terminal transmission; Matching module 302, the access control rule that is used for the control table of traversal queries access rights, according to the access control rule that described user's characteristic information is determined and described user terminal is complementary, with the access control rule and the corresponding score value addition of user characteristics item that described user's characteristic information is complementary of described coupling, obtain the matching score of the access control rule of described coupling; Determination module 303 is used for described access device and according to the access control rule of described coupling, the access control rule that score reaches predetermined threshold the access rights of described user terminal is controlled.
Preferably, in the described device, described determination module is further used for the highest access control rule of score in the access rule of described coupling is defined as described user terminal optimum Match rule, and according to described optimum Match rule the access rights of described user terminal is controlled.
Preferably, in the device of this embodiment, matching module comprises: user characteristics item determination module is used for need determining the user characteristics item of inquiry when determining the access control rule that is complementary with described user terminal; Whether the described content of the user characteristics item of inquiry that needs that comprises in the comparison module, the content of the described user characteristics item that needs inquiry that is used for that the access control rule of more described current inquiry comprises and the user's characteristic information of described extraction mates.
Preferably, in the device of this embodiment, user characteristics item determination module comprises: the determined property module is opened in inquiry, be used to judge whether inquiry unlatching attribute default, described user characteristics item is opening, the user characteristics item that attribute is the user characteristics Xiang Weixu inquiry of opening is opened in inquiry.
Preferably, in the device of this embodiment, the user characteristics item comprises at least one in the following characteristic item: the input port of request message; The Media Access Control address of user terminal; VLAN under the user terminal; The IP address of user terminal; The identity information of user terminal.
The present invention also provides a kind of access device of protecting the device of control access rights in the above-mentioned internet protocol television service.
Technical scheme of the present invention is fairly simple, be easy to realize, and can satisfy access control demand more flexibly, can mate access control rule fast according to the user's characteristic information of user side, realize the control of access privilege, improve the efficient of coupling, improve user's experience, provide the demand (telecommunication) service of ipv6 etc. after helping, for the user provides better service.
The above only is a preferred implementation of the present invention; should be pointed out that for those skilled in the art, under the prerequisite that does not break away from the principle of the invention; can also make some improvements and modifications, these improvements and modifications also should be considered as protection scope of the present invention.

Claims (11)

1. the method for control access rights in the internet protocol television service is characterized in that, comprises the steps:
Steps A, access device are extracted the user's characteristic information of described user terminal from the service data request message that user terminal sends;
Step B, access control rule in the control table of described access device traversal queries access rights, according to the access control rule that described user's characteristic information is determined and described user terminal is complementary, with the access control rule and the corresponding score value addition of user characteristics item that described user's characteristic information is complementary of described coupling, obtain the matching score of the access control rule of described coupling;
Step C is in the access control rule of described access device according to described coupling, the score access control rule that reaches predetermined threshold controls the access rights of described user terminal.
2. method according to claim 1 is characterized in that, described step C comprises:
Described access device is defined as described user terminal optimum Match rule with the highest access control rule of score in the access control rule of described coupling, and according to described optimum Match rule the access rights of described user terminal is controlled.
3. method according to claim 1 and 2 is characterized in that, among the described step B, described step definite according to described user's characteristic information and the access control rule that described user terminal is complementary comprises:
Step B1 determines the user characteristics item that need inquire about;
Step B2, whether the described content of the user characteristics item of inquiry that needs that comprises in the content of the described user characteristics item that need inquire about that comprises in the access control rule of more current inquiry and the user's characteristic information of described extraction mates.
4. method according to claim 3 is characterized in that, described step B1 comprises:
Judge whether inquiry unlatching attribute default, described user characteristics item is opening; In this way, then determine the user characteristics item of described user characteristics Xiang Weixu inquiry; Otherwise, do not need described user characteristics item is inquired about.
5. method according to claim 4 is characterized in that, among the described step B1, when attribute is opened in the inquiry of judging described user characteristics item not for opening, also comprises:
Step B11 judges that whether described user characteristics item is last the user characteristics item in the access control rule of current inquiry; In this way, execution in step B12 then; Otherwise, continue to judge whether the unlatching attribute of the next user characteristics item in the access control rule of described current inquiry is opening, all the user characteristics items in the access control rule of having judged described current inquiry;
Step B12, whether the access control rule of judging described current inquiry is the last item access control rule in the described access control rule table, in this way, execution in step C then; Otherwise, continue next bar access control rule of visit.
6. method according to claim 4 is characterized in that:
Described user characteristics item comprises at least one in the following characteristic item:
The request message input port;
The Media Access Control address of user terminal;
VLAN under the user terminal;
The IP address of user terminal;
The IPV4 address of user terminal;
The IPV6 address of user terminal;
The identity information of user terminal.
7. according to each described method in claim 1 or 2, it is characterized in that the score value of described user characteristics item is corresponding with the priority of described user characteristics item, the user characteristics item score value that priority is high more is big more.
8. the device of control access rights in the internet protocol television service is characterized in that, comprising:
The user characteristics extraction module is used for extracting the user's characteristic information of described user terminal from the service data request message of user terminal transmission;
Matching module, the access control rule that is used for the control table of traversal queries access rights, according to the access control rule that described user's characteristic information is determined and described user terminal is complementary, with the access control rule and the corresponding score value addition of user characteristics item that described user's characteristic information is complementary of described coupling, obtain the matching score of the access control rule of described coupling;
Determination module is used for described access device and according to the access control rule of described coupling, the access control rule that score reaches predetermined threshold the access rights of described user terminal is controlled.
9. device according to claim 8, it is characterized in that, described determination module, be further used for the highest access control rule of score in the access rule of described coupling is defined as described user terminal optimum Match rule, and the access rights of described user terminal controlled according to described optimum Match rule.
10. according to Claim 8 or 9 described devices, it is characterized in that described matching module comprises:
User characteristics item determination module is used for need determining the user characteristics item of inquiry when determining the access control rule that is complementary with described user terminal;
Whether the described content of the user characteristics item of inquiry that needs that comprises in the comparison module, the content of the described user characteristics item that needs inquiry that is used for that the access control rule of more current inquiry comprises and the user's characteristic information of described extraction mates.
11. device according to claim 10 is characterized in that, described user characteristics item determination module comprises:
The determined property module is opened in inquiry, is used to judge whether inquiry unlatching attribute default, described user characteristics item is opening, and the user characteristics item that attribute is the user characteristics Xiang Weixu inquiry of opening is opened in inquiry.
CN2009102375006A 2009-11-13 2009-11-13 Method and device for controlling access authority in Internet protocol television service Active CN101707695B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN2009102375006A CN101707695B (en) 2009-11-13 2009-11-13 Method and device for controlling access authority in Internet protocol television service

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN2009102375006A CN101707695B (en) 2009-11-13 2009-11-13 Method and device for controlling access authority in Internet protocol television service

Publications (2)

Publication Number Publication Date
CN101707695A CN101707695A (en) 2010-05-12
CN101707695B true CN101707695B (en) 2011-11-30

Family

ID=42377875

Family Applications (1)

Application Number Title Priority Date Filing Date
CN2009102375006A Active CN101707695B (en) 2009-11-13 2009-11-13 Method and device for controlling access authority in Internet protocol television service

Country Status (1)

Country Link
CN (1) CN101707695B (en)

Families Citing this family (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN102231733B (en) * 2011-06-21 2014-06-11 中国人民解放军国防科学技术大学 Access control method, host device and identifier router
CN107483483A (en) * 2017-08-31 2017-12-15 中国农业银行股份有限公司 The customer information access control method and device of a kind of financial circles information system
CN112187739B (en) * 2020-09-11 2022-12-20 苏州浪潮智能科技有限公司 Configuration method, system, terminal and storage medium of mandatory access rule

Also Published As

Publication number Publication date
CN101707695A (en) 2010-05-12

Similar Documents

Publication Publication Date Title
US8028319B2 (en) Passive video caching for edge aggregation devices
EP1715628B1 (en) A method for realizing the multicast service
CN101207501B (en) IP broadcasting system and a multicast group management apparatus for the same
US8149859B2 (en) Method for managing delivery of multicast traffic to devices
US20060083253A1 (en) Home gateway system for providing optical communication packet data interface function and home broadcast service providing method using the same
EP1601199A1 (en) Broadband telecommunications system and method used therein to reduce the latency of channel switching by a multimedia receiver
US7813287B2 (en) Fast TV channel changing in IPTV network
CN101640787B (en) Method and device for hierarchical control access of multicast group
CN101753976A (en) The method, apparatus and system of control interactive network TV service
CN101656872B (en) Method and system for reducing time delay of switching channels of network TV
CN101707695B (en) Method and device for controlling access authority in Internet protocol television service
US8238337B1 (en) Hybrid multicast switch employing network-layer routing
EP1987651B1 (en) Method to optimize the data stream between a router and a multimedia unit
CN100499567C (en) Method for realizing video multicast service medium frequency switch
US8584170B2 (en) System and method of internet group management for multicast push in passive access networks
CN100546377C (en) Interactive digital television broadcast system
CN101827036B (en) Method and device for realizing multicast service configuration of home gateway
CN101771901B (en) Method of multicast permission control in passive optical network, system and multi-dwelling unit
CN101110814A (en) Method for implementing authority control of user multicast
CN101931787B (en) Method, device and system for controlling multicast programs
US20090323548A1 (en) Method, system and terminal for determining qos level
US20050083440A1 (en) Broadcasting service providing system using the point to multi-point connection in ATM network and method therof
KR100649716B1 (en) Method and apparatus for multicast forwarding in broadcast service based on multicast packet
KR20080061583A (en) System and method for reducing cannel zapping time of iptv
CN111372106A (en) Method for realizing all-IP digital television conditional receiving technology through CMTS

Legal Events

Date Code Title Description
C06 Publication
PB01 Publication
C10 Entry into substantive examination
SE01 Entry into force of request for substantive examination
C14 Grant of patent or utility model
GR01 Patent grant